170546 matches found
MINI-G7QR-9CR9-JH28
Bulletin has no description...
MINI-67CG-P9JJ-33R6
Bulletin has no description...
CVE-2026-72843 EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentication middleware to call next without checking the caller, and no customer-session middleware guards the route; the on...
CVE-2026-72843 EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentication middleware to call next without checking the caller, and no customer-session middleware guards the route; the on...
CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3
CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3. A patched version of the package is available...
CVE-2026-2334 ) Missing Server-Side File Extension Validation in vsDesk
An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload of an arbitrary file, which can lead to Remote Code Executi...
EUVD-2026-42235
Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...
MINI-2HJ9-R69M-6QJP
Bulletin has no description...
MINI-5QQC-Q8MC-9W87
Bulletin has no description...
ROOT-OS-DEBIAN-11-CVE-2025-5987 CVE-2025-5987 in libssh - Patched by Root
Root has patched CVE-2025-5987 in the libssh package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-68431 CVE-2025-68431 in libheif - Patched by Root
Root has patched CVE-2025-68431 in the libheif package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-66034 CVE-2026-66034 in libssh2 - Patched by Root
Root has patched CVE-2026-66034 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-15661 CVE-2025-15661 in libssh2 - Patched by Root
Root has patched CVE-2025-15661 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root
Root has patched CVE-2026-66035 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-76833
creationtimestamp| type| source ---|---|--- 2026-08-20 15:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjj5g6een2r...
CVE-2026-61897 accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 root. A shell spawned by a helper script inherits ruid=0 and may reset its...
ROOT-OS-DEBIAN-11-CVE-2022-2881 CVE-2022-2881 in bind9 - Patched by Root
Root has patched CVE-2022-2881 in the bind9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-29157 CVE-2024-29157 in hdf5 - Patched by Root
Root has patched CVE-2024-29157 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...
